Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/80988a94d6ef3596e8f57e682311fbdd4dc1618f.roa
File:                     80988a94d6ef3596e8f57e682311fbdd4dc1618f.roa (raw, json)
Hash identifier:          gsWzwlifF/33MCE0e2EyQGX3ZxPqO993YEt5gt/Sk2g=
Subject key identifier:   7B:23:FE:0F:F6:7A:78:C8:0A:B8:2E:C7:D8:65:F8:4E:65:77:67:66
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1A17C6
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/80988a94d6ef3596e8f57e682311fbdd4dc1618f.roa
Signing time:             Thu 22 Sep 2022 20:21:59 +0000
ROA not before:           Thu 22 Sep 2022 20:21:30 +0000
ROA not after:            Sun 22 Sep 2024 20:21:30 +0000
asID:                     3790
IP address blocks:        190.241.72.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1710022 (0x1a17c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 22 20:21:30 2022 GMT
            Not After : Sep 22 20:21:30 2024 GMT
        Subject: CN=80988a94d6ef3596e8f57e682311fbdd4dc1618f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1c:15:99:80:de:84:cf:30:02:cf:52:d3:bf:
                    46:ca:6f:61:f7:86:2b:a5:d1:c5:9c:30:2c:4d:3c:
                    fc:4a:cb:a5:62:71:d0:7f:8b:13:3f:ee:d9:cb:71:
                    e8:6f:ce:4b:d7:08:23:3b:db:44:9f:c1:00:60:9b:
                    46:76:64:51:fc:b7:ab:f8:bf:d9:d6:09:7a:60:de:
                    49:62:11:19:38:c1:85:48:a8:6d:0f:8a:89:59:d6:
                    07:2c:92:36:80:97:27:83:61:de:76:f9:16:a4:b1:
                    52:67:c8:9c:49:1f:3a:eb:ce:eb:3c:91:3f:de:ad:
                    42:01:e1:76:3b:62:9f:ed:d9:e9:9a:02:a9:3e:4b:
                    3c:6a:5d:07:44:8c:c3:1e:54:5c:03:2e:29:fa:bb:
                    9d:b2:bb:54:e8:71:7d:1b:49:7e:9a:55:e3:fa:3d:
                    ca:e0:1b:5f:98:58:e2:02:b3:1c:87:c6:2a:c3:1a:
                    42:e7:17:8a:de:24:4a:67:ab:01:9f:d2:73:42:4b:
                    ce:9c:87:71:cd:8a:89:84:4d:2e:9a:13:fe:80:ea:
                    6a:8b:40:55:e4:91:3e:c0:bb:6d:e7:82:e1:dd:32:
                    7a:12:b8:a3:e5:92:f3:91:ba:02:d2:08:43:5b:af:
                    81:ff:95:8c:c5:50:93:35:50:a5:02:15:01:d3:e5:
                    0c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:23:FE:0F:F6:7A:78:C8:0A:B8:2E:C7:D8:65:F8:4E:65:77:67:66
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/80988a94d6ef3596e8f57e682311fbdd4dc1618f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.241.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:b6:88:13:0c:06:75:c1:fc:81:2b:06:30:9a:89:b9:cb:0f:
         a2:2f:83:73:9a:3c:5c:b0:eb:b8:b1:3a:06:81:82:90:3a:af:
         83:ea:a7:d8:bb:9c:03:ae:4a:c7:fb:f3:38:10:55:68:dc:98:
         d5:c2:33:c9:ea:e5:8a:41:5b:b6:86:85:d1:1e:69:73:79:9b:
         0b:d6:46:ec:bb:22:3e:de:1b:47:01:c3:c9:7d:95:01:59:ae:
         b3:66:a6:87:ac:59:e3:b9:97:3c:e7:55:be:71:11:35:26:74:
         d6:4f:82:76:94:bf:14:3e:67:9e:5a:2b:0d:27:cb:ea:24:27:
         ed:a9:a2:2f:b0:a5:34:c2:1d:ac:e8:cc:36:65:de:82:c2:27:
         5c:b9:6f:54:eb:2a:c3:b4:0e:51:c5:55:b9:49:43:c3:63:0c:
         0e:8a:11:c9:13:ce:76:78:2b:6c:70:59:8f:67:26:f4:f0:3c:
         d8:e4:47:f8:98:54:b4:61:48:64:4b:07:9c:5c:fd:b2:93:bd:
         aa:b8:04:41:68:17:4b:8a:0e:a3:38:05:6a:62:90:7d:9e:46:
         fd:05:52:e9:4b:86:12:7e:c4:3c:d2:76:57:4b:81:ea:9a:46:
         2e:a3:a4:14:9d:4d:51:e6:fb:c1:69:5a:eb:8e:81:4a:88:6d:
         4a:5d:6d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----